Introduction

Table of Contents

ITAM administrators have complete control over their system. When they log into their ITAM instance, they see a substantially different set of tools than their Examiner and Portal User counterparts.

This guide is a comprehensive handbook for Continuum GRC ITAM administrators, written to help them navigate the complexities of their system. It works as a standalone reference document, or alongside the ITAM Administrator’s Bootcamp, a course of how-to videos that walks you through ITAM menus and interfaces.

Throughout this guide, you will work with features and functionality that cover:

Document and evidence management, form creation and management, and user and security management, with regulatory sources available to populate form fields.
Dashboards that report on your compliance team’s progress based on risk profiles, completed Action ITAMs, or ongoing form field requirements.
Controls that manage and secure your ITAM instance by allowing or disallowing users and governing how long users can access the system.
Integrations that connect productivity and data management platforms to ITAM in support of tickets and task assignments.
Customization that matches ITAM to your branding and communication identity, or white-labels instances for compliance clients.

By the end of this document, you will have a much better understanding of your system and of where to find specific functionality and features.

Using ITAM: Main Navigation

Almost every feature of the ITAM system is reachable from the primary navigation dashboard. This dashboard differs from the ones used by Examiners and Portal Users, and it concentrates on system management and form building.

The Main Menu

The main menu is available on every screen and dashboard. It is your anchor as you move through the system and the quickest way to jump between areas of ITAM:

The Main Navigation Menu: Provides access to the ITAM Admin Portal’s core features. See the Functional Areas section below for more information.
User Profile and Supplementary Navigation: This button displays the logged-in admin’s name and, when pressed, provides access to the administrator’s user profile and a secondary navigation option for most buttons on the screen.
Forms Area: The Forms Area includes forms grouped into folders (on the left) and those without folders (on the right).
Form Creation and Deletion: Buttons that open a Create New or Mass Delete Form, respectively.

The Main Navigation Menu

Forms: Your primary Forms dashboard, containing your collection of forms and form folders.
Files: A dashboard of every file you or your users have uploaded while completing form fields.
Reports: A dashboard of the reports created as your compliance team completes forms and uploads evidence.
Dashboards: An interactive space where admins and examiners create and pull reports on risk management, team utilization, and other system metrics in real time.
Users: The dashboard that concentrates admin controls for user management. This is where you manage, create, and remove users and user types.
Templates: A dashboard where you define CSS templates for ITAM interfaces.
Settings: A comprehensive set of properties you use to control how ITAM functions, including additional user management features, security configuration management, and data management.
System Alerts: A list of all notifications and alerts raised by ITAM.

This Administrator’s Handbook will cover each of these sections and relevant functionality in detail. Additionally, if you are currently an ITAM Admin, or will be one as your company adopts the platform, make sure that you’re using this handbook alongside our Administrator’s Bootcamp.

Contact the Continuum GRC team if you need course access.

Under the Main Navigation section, you’ll have access to core parts of your ITAM system. This handbook will be divided along these functions and features:

1. Settings

Provides you with a large selection of settings and integration dashboards to control the look, feel, and functionality of your ITAM system.

System Settings: An introduction to the Settings Dashboard
Site-wide System Settings: Configure system-wide settings, email, and Time Machine.
Security Settings: All settings related to authentication and access to the system and its data.

2. Form Manager

Forms are the core of any compliance process, and the form manager allows you to create, edit, and manage the forms your entity will use to gather information and assess and facilitate compliance.

Form Management: The Form Manager view and the tools reachable directly from it — searching and filtering forms, tagging, enabling or disabling, duplicating, deleting, canceling, setting payment options, changing themes, and organizing forms into folders.
Entry Manager: Views and works with the data users have entered on a form — editing, forwarding, printing, exporting to PDF or CSV, generating documents, updating statuses, and deleting entries.
Form Integration: Connecting forms and their data to outside systems through third-party platform integrations, webhooks, and iframe or simple-link embedding.
Form Logic: The Logic Builder rules that route users dynamically through a form — show/hide fields, skip pages, send notifications, push data externally, and manage approval workflows.
Form Notifications: The four form-specific email types (submission notices, user confirmations, sending data to another website, and scheduled administrative reminders).
POA&M Forms: Configuring Plan of Action and Milestones forms with a template and auto-generation logic, and how an administrator interacts with them

3. Form Builder

Introduction to the Form Builder: The graphical workspace for building a form, including accessing the builder, adding, configuring, moving, duplicating, and deleting fields, saving, and creating multi-page forms.
Form Fields: The 25 available field types and their intended uses.
Form Field Properties: The configuration properties applied to fields, from labels, sizes, and choices to validation rules, upload options, and advanced settings.
Automapping: Syncs data across form fields that share the same template code within an entity, aligning overlapping controls across frameworks so a single set of controls satisfies multiple requirements.

4. Files Manager

Upload, manage, delete, play, and edit the files uploaded to any form you oversee.

File Manager: The dashboard for viewing and working with files an entity has uploaded as evidence, including the entity selection menu, the file management section, and the file navigation table.
File Location and Form Fields: How ITAM manages file instances tied to form fields, using the Form Location column and Select button to point to a specific instance and jump to it in a form.
Filtering, Selecting, and Managing Files: Narrowing the file list with the search field, sorting by column, and managing file metadata, permissions, and aged files.
File Types: Reports, Deliverables, and Templates: The three file categories you can toggle between in the file management section.

5. Reports and Dashboards

Allows you to view any reports created as part of the team’s ITAM usage and the included forms. Also allows you to create report dashboards covering Action ITAMs, completion percentages, and other system metrics.

Reports Manager: The Report Manager dashboard where you generate evidentiary reports from pre-built templates and completed form data; accessing the page, generating and regenerating reports, exporting a report list, and deleting reports.
Dashboards Manager: The interface for creating and viewing interactive data-visualization dashboards that track system health and form status, including the shared report features (print, delete, shareable link, download) and the header summary.
Report Types: The built-in dashboard types available to view compliance data — Audit, Artifact Management, Compliance, Executive Overview, Action ITAMs, Risk Scores, Risk Scoreboard, Status Indicators, and others such as Project Health, Entity, Examiner Allocation, and AI Scores.

7. User Administration

Allows you to create, edit, and manage administrative users, examiner users, portal entities, and portal users.

Creating, Editing, and Managing Users: Working with the three user types to perform tasks like adding administrative, examiner, and portal users, setting their privileges and permissions, editing profiles, enabling two-step verification, and suspending, deleting, or unblocking accounts.
Creating, Editing, and Managing Entities: Working with portal entities as logical groups of users and forms, adding an entity and its contact details, editing it, and deleting it.
Administrator Account Settings: Viewing and editing your own profile via My Profile. This includes personal info, password changes, resetting multi-factor authentication, digital signature setup, and the My Activity log.